YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Case-incensitive search are likely to catch too mnuch legitimate stuff resulting in redacting a shitload of stuff

Browse source
This commit is contained in:
Alexandre Aubin 2021-06-10 15:44:00 +02:00
parent 3ce978aa2f
commit c8d4bbf82b
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/yunohost/log.py
View file

@ -415,9 +415,8 @@ class RedactingFormatter(Formatter):
# (the secret part being at least 3 chars to avoid catching some lines like just "db_pwd=") # (the secret part being at least 3 chars to avoid catching some lines like just "db_pwd=")
# Some names like "key" or "manifest_key" are ignored, used in helpers like ynh_app_setting_set or ynh_read_manifest # Some names like "key" or "manifest_key" are ignored, used in helpers like ynh_app_setting_set or ynh_read_manifest
match = re.search( match = re.search(
r"(pwd|pass|password|passphrase|secret\w*|\w+key|token)=(\S{3,})$", r"(pwd|pass|password|passphrase|secret\w*|\w+key|token|PASSPHRASE)=(\S{3,})$",
record.strip(), record.strip(),
re.IGNORECASE
) )
if ( if (
match match